Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BJoCQlkfoMU7FVDt3kV_1lKoM20.roa
File: BJoCQlkfoMU7FVDt3kV_1lKoM20.roa (raw, json)
Hash identifier: +8co3HdvRttV1qu8SxbpRM0yu1Jnh7qZg32KI3krVcY=
Subject key identifier: 04:9A:02:42:59:1F:A0:C5:3B:15:50:ED:DE:45:7F:D6:52:A8:33:6D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0AFF50F50E9ABCBC43662BBFF0A17E6E2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BJoCQlkfoMU7FVDt3kV_1lKoM20.roa
Signing time: Thu 17 Sep 2026 15:21:08 +0000
ROA not before: Thu 17 Sep 2026 15:21:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 82.108.162.0/24 maxlen: 24
87.82.197.0/24 maxlen: 24
87.83.63.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
87.85.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:f5:0f:50:e9:ab:cb:c4:36:62:bb:ff:0a:17:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 17 15:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=049a0242591fa0c53b1550edde457fd652a8336d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:a2:e4:ae:27:0a:eb:48:2e:54:16:25:1a:
49:c6:b1:96:89:15:81:05:07:e8:15:c3:2e:ab:39:
7d:cf:9f:71:16:6d:0a:c7:6b:dc:f2:68:b7:a6:cf:
ee:b2:31:ee:5d:1b:76:e8:c1:22:a2:0c:3f:c3:3e:
24:2b:a3:48:d5:94:e6:e0:54:bf:60:4e:69:4d:4a:
fa:ac:8c:3a:fb:b1:88:4a:7d:c1:33:a3:cb:f4:3e:
9a:7f:85:59:25:d9:67:05:23:74:49:87:de:4d:c6:
1b:cf:34:1f:1d:de:38:a9:d9:c2:ae:3f:68:90:f0:
99:8e:ab:85:e5:dd:3f:db:d2:fa:75:b0:00:80:63:
45:6a:59:59:2c:0c:00:54:32:e2:5b:fe:05:2e:87:
35:eb:31:8c:c5:9f:0e:24:94:5f:af:4c:21:4e:87:
f1:2a:c0:6c:db:61:ad:af:55:80:66:70:3b:9e:a5:
87:10:ae:62:07:54:11:0a:ea:7b:9c:da:c3:6d:cd:
d6:91:9e:ab:93:3d:3f:ca:9e:f0:ab:35:19:68:47:
20:fb:37:1a:53:37:86:18:b7:82:49:9a:0f:b5:ac:
9f:8e:cd:db:ca:05:1e:2d:bf:fa:e5:a6:1c:5f:44:
ae:42:f6:2c:5b:1d:a5:8b:7b:ed:96:86:54:bf:e1:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9A:02:42:59:1F:A0:C5:3B:15:50:ED:DE:45:7F:D6:52:A8:33:6D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BJoCQlkfoMU7FVDt3kV_1lKoM20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.162.0/24
87.82.197.0/24
87.83.63.0/24
87.84.232.0/24
87.85.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:22:64:88:8e:2a:1c:b9:ed:e7:7a:53:ea:1d:00:54:ab:06:
8c:49:65:b1:81:bf:a6:ae:97:49:8e:3e:a8:6f:c7:c0:6b:3a:
36:e3:07:05:05:3a:bc:25:52:65:33:07:4c:54:b2:3b:bc:13:
db:11:e3:1a:c7:6a:17:20:9c:af:00:40:9c:c5:d4:91:fc:8c:
36:b6:f7:65:b2:32:a7:5e:82:cf:ef:7c:8a:1d:28:33:54:23:
c7:26:b2:2a:e3:8a:7a:97:57:15:87:cd:c7:a0:fb:7c:39:80:
cc:85:71:99:64:9b:b5:0a:b5:72:b1:ae:63:67:5b:8b:af:76:
f8:3d:ad:5c:ad:68:c3:92:1f:a4:2b:25:25:0f:4c:3b:be:20:
18:a1:ae:a3:88:62:ab:14:36:68:4a:fc:9a:e4:22:37:8a:d1:
eb:77:b8:c3:cd:76:c1:1d:56:b7:6f:1e:3f:d2:fa:b1:0b:9c:
5a:a8:79:20:5c:18:a9:28:cc:fc:2d:e1:86:51:5a:4a:5d:df:
5e:16:1a:84:b2:55:19:07:02:10:4d:ff:98:63:5d:74:bb:20:
dc:20:9d:32:58:c6:44:b8:33:f4:d3:2a:1b:30:f6:29:6a:ae:
e6:64:83:34:9e:1e:39:ff:c2:d8:dc:18:38:e0:79:a6:a0:86:
bb:3e:01:19
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaCv9Q9Q6avLxDZiu/8KF+biMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTE3MTUyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDlhMDI0MjU5MWZhMGM1M2IxNTUwZWRkZTQ1N2ZkNjUyYTgzMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrmi5K4nCutILlQWJRpJxrGWiRWB
BQfoFcMuqzl9z59xFm0Kx2vc8mi3ps/usjHuXRt26MEiogw/wz4kK6NI1ZTm4FS/
YE5pTUr6rIw6+7GISn3BM6PL9D6af4VZJdlnBSN0SYfeTcYbzzQfHd44qdnCrj9o
kPCZjquF5d0/29L6dbAAgGNFallZLAwAVDLiW/4FLoc16zGMxZ8OJJRfr0whTofx
KsBs22Gtr1WAZnA7nqWHEK5iB1QRCup7nNrDbc3WkZ6rkz0/yp7wqzUZaEcg+zca
UzeGGLeCSZoPtayfjs3bygUeLb/65aYcX0SuQvYsWx2li3vtloZUv+EjJwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFASaAkJZH6DFOxVQ7d5Ff9ZSqDNtMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvQkpvQ1Fsa2ZvTVU3RlZEdDNrVl8xbEtvTTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUmyiAwQA
V1LFAwQAV1M/AwQAV1ToAwQAV1WIMA0GCSqGSIb3DQEBCwUAA4IBAQAKImSIjioc
ue3nelPqHQBUqwaMSWWxgb+mrpdJjj6ob8fAazo24wcFBTq8JVJlMwdMVLI7vBPb
EeMax2oXIJyvAECcxdSR/Iw2tvdlsjKnXoLP73yKHSgzVCPHJrIq44p6l1cVh83H
oPt8OYDMhXGZZJu1CrVysa5jZ1uLr3b4Pa1crWjDkh+kKyUlD0w7viAYoa6jiGKr
FDZoSvya5CI3itHrd7jDzXbBHVa3bx4/0vqxC5xaqHkgXBipKMz8LeGGUVpKXd9e
FhqEslUZBwIQTf+YY110uyDcIJ0yWMZEuDP00yobMPYpaq7mZIM0nh45/8LY3Bg4
4HmmoIa7PgEZ
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:31 2026 by rpki-client